Up-to-date software updates

We remind you to use the latest software versions and recommend you to read and install the necessary updates. Updating your devices, including the operating system and software, to the latest version eliminates a number of problems by fixing the corresponding security vulnerability and ensuring that vulnerabilities and malware are countered.

We are sharing a list of recommended updates prepared by the CERT-UA team to ensure reliable cyber defense:

Microsoft has released a monthly update to address vulnerabilities affecting the company's products.

https://msrc.microsoft.com/update-guide/releaseNote/2024-Feb

Fortinet has released an update to address critical remote code execution vulnerabilities in FortiOS (CVE-2024-21762, CVE-2024-23313).

https://www.fortiguard.com/psirt/FG-IR-24-015

https://www.fortiguard.com/psirt/FG-IR-24-029

Cisco has released security advisories to address the vulnerability (CVE-2024-20253), as well as vulnerabilities affecting Cisco Expressway Series:

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cucm-rce-bWNzQcUm?fbclid=IwAR1fd9IuIhreFytRiUtaL6X4XrYPaO-KFDKe6aVGhEeD2vAWpunNdOzc6H0

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-expressway-csrf-KnnZDMj3?fbclid=IwAR1lt6zmZN4Iw-r3m2gyCtsgfaTBVmOIPnTMSwr2Tz3-YiAKnNmRLBB222c

The Internet Systems Consortium (ISC) has published security advisories to address vulnerabilities affecting multiple versions BIND ISC 9.

CVE-2023-50868 https://kb.isc.org/docs/cve-2023-50868

CVE-2023-50387 https://kb.isc.org/docs/cve-2023-50387

CVE-2023-6516 https://kb.isc.org/docs/cve-2023-6516

CVE-2023-5680 https://kb.isc.org/docs/cve-2023-5680

CVE-2023-5679 https://kb.isc.org/docs/cve-2023-5679

CVE-2023-5517 https://kb.isc.org/docs/cve-2023-5517

CVE-2023-4408 https://kb.isc.org/docs/cve-2023-4408

Adobe has released a security update to address vulnerabilities in Adobe software.

Adobe Commerce і Magento https://helpx.adobe.com/.../products/magento/apsb24-03.html

Adobe Substance 3D Painter https://helpx.adobe.com/.../substance3d.../apsb24-04.html

Adobe Acrobat і Reader https://helpx.adobe.com/.../products/acrobat/apsb24-07.html

Adobe FrameMaker Publishing Server https://helpx.adobe.com/.../framemaker.../apsb24-10.html

Adobe Audition https://helpx.adobe.com/.../products/audition/apsb24-11.html

Adobe Substance 3D Designer https://helpx.adobe.com/.../substance3d.../apsb24-13.html

VMware released security recommendations to address vulnerabilities in Aria Operations for Networks.

https://www.vmware.com/sec.../advisories/VMSA-2024-0002.html

Juniper Networks issued a security bulletin to address vulnerabilities in several products.

https://supportportal.juniper.net/s/article/2024-01-Security-Bulletin-JSA-Series-Multiple-vulnerabilities-resolved-in-JSA-Applications?language=en_US&fbclid=IwAR31sTOlu3taV43xyzFsYMamjNVDX2EZVDNyC784weQdb7kDZfzQqrBBPoE

https://supportportal.juniper.net/s/article/2024-01-Out-of-Cycle-Security-Bulletin-Junos-OS-SRX-Series-and-EX-Series-Multiple-vulnerabilities-in-J-Web-have-been-addressed?language=en_US&fbclid=IwAR3uaARod4IWT4-_vS9jyGxNA3S7OBRTi57Ua3ThRj0CePgrrxMhtj4XlMs

Mozilla released a security update to address vulnerabilities in Thunderbird і Firefox.

Thunderbird 115.7 https://www.mozilla.org/.../security/advisories/mfsa2024-04/

Firefox ESR 115.7 https://www.mozilla.org/.../security/advisories/mfsa2024-02/

Firefox 122 https://www.mozilla.org/.../security/advisories/mfsa2024-01/

Google has released Chrome 122 (122.0.6261.43) для Android.

https://chromereleases.googleblog.com/2024/01/chrome-for-android-update_0251787784.html?fbclid=IwAR1pn4ANFelXY45gIxjnHm2adp9Rfx59-qvS6dY91ta1dkI6D5wQWNsjMXw

Datastream based on materials: https://cert.gov.ua

All of the above updates are primarily intended to provide timely security fixes, improve performance, and enhance the functionality of your devices. Therefore, do not neglect notifications about new software versions and update your devices and applications on time.